The announcement comes amid intensifying competition among technology vendors to tackle challenges such as AI driven attacks, cloud misconfigurations, and the growing use of automated threat tools. These risks are becoming more pronounced as organizations adopt AI at scale while struggling with visibility into shadow AI deployments.

Supporting this context, Mandiant released its M Trends 2026 report, based on extensive incident investigations. The findings show attackers are accelerating their operations, with response windows shrinking to as little as 22 seconds in some cases. The report also highlights a shift toward more organized cybercriminal groups and long running breaches that can persist undetected for years.

In parallel, research from Google Threat Intelligence Group indicates that attackers are moving beyond experimental use of AI toward adaptive tools and autonomous agents capable of rewriting their own code in real time. This evolution is raising the stakes for defenders, who must now counter increasingly sophisticated and automated threats.

To address these challenges, Google introduced new agent based automation capabilities within Google Security Operations. These tools allow security teams to embed AI agents into workflows to investigate alerts, gather evidence, and assist in response decisions. A new triage and investigation agent is designed to reduce time spent on false positives and routine tasks, while support for remote model context protocol connections enables organizations to build custom security agents without managing infrastructure.

“Few would argue that the progress made in the past 12 to 18 months to put AI to work to improve security operations is remarkable. New research from Omdia shows that 89% of CISOs are pushing to accelerate the adoption of agentic security,” said David Gruber, Principal Analyst, Cybersecurity, Omdia.

“Not only does this commitment reflect the urgency in combating an AI-enabled adversary, but our data also show that over half of cybersecurity practitioners believe that agentic AI offers a bigger advantage to cybersecurity defenders over the adversary. With the promise of significant improvement to security outcomes, Google Cloud is well-positioned to help organizations transform their SOCs with this powerful new technology,” said Gruber.

Google also expanded its threat intelligence capabilities by introducing dark web intelligence powered by AI agents. The system analyzes large volumes of data to identify relevant threats, reduce false positives, and uncover risks such as compromised access involving subsidiaries.

“In previous roles, I’ve leveraged several dark web tools and found they averaged over 90% false positives. The new dark web intelligence flips this, filtering noise and connecting dots that no human analyst could see in time. It’s the difference between reacting to a fire and putting it out before the match is struck,” said Michael Kosak, Director, Threat Intelligence, LastPass.

Additional updates include enhancements to Security Command Centre, with new AI protection features for detecting threats involving AI agents, and expanded controls for preventing prompt injection and data leakage. Google also introduced new capabilities for external exposure management and network security, along with updates to Chrome Enterprise Premium for improved data protection.

With 72 percent of organizations lacking confidence in their ability to execute a secure AI strategy, Google Wiz acquisition AI security tools reflects a broader industry shift toward integrating AI driven defense across cloud environments. By combining Wiz’s capabilities with new automation and intelligence tools, Google is positioning itself to help enterprises strengthen resilience and adapt to an increasingly complex threat landscape.